mirror of
https://github.com/deepseek-ai/deepseek-harness
synced 2026-08-15 21:04:50 +00:00
2dc62497ce
Extend SandboxMode enforcement from bash to the filesystem tools, the sandbox RFC's deferred cross-family phase. - dsh-sandbox-policy (new, ctx.sandboxPolicy): the single home for the deployment default mode + workspaceRoot and the per-session override event, renamed bash/sandbox-mode -> sandbox/mode and moved here with its fold/setter. Decouples the bash seam from dsh-session. - dsh-fs-sandbox (new): SandboxedFileSystem extends LocalFileSystem and fences write/edit by the per-call mode (read-only denies, workspace-write contains to the workspace + temp roots via the shared writableRoots, danger passes through); reads pass through. Structured FS_SANDBOX_DENIED; in-lock parent re-canonicalization. A policy fence in trusted code, not a kernel boundary. - dsh-sandbox: the shared escalation kit (writableRoots, the strictly-wider ladder, denial/hint markers, approveEscalation) both tool families use; approveEscalation takes a structural approver so dsh-sandbox gains no approval/agent dependency, and both tools stay duplication-free. - tool-fs: write/edit advertise sandbox_permissions/justification under a confining ctx.fs, map FS_SANDBOX_DENIED to the shared [sandbox: ...] marker, and resolve the same one-approved-wider retry. - examples/acp-agent: composes sandbox-policy + fs-sandbox, drops the gating that disabled the fs stack under confined modes. RFC docs/rfc/implemented/feature/2026-07-14-cross-family-fs-sandbox.md; the old sandbox RFC's In-process/deferred/FAQ sections updated to shipped fact.
98 lines
4.1 KiB
JSON
98 lines
4.1 KiB
JSON
{
|
|
"extends": "./tsconfig.base.json",
|
|
"compilerOptions": {
|
|
"noEmit": true,
|
|
"rewriteRelativeImportExtensions": false
|
|
},
|
|
"include": [
|
|
"examples/*/src/**/*.ts",
|
|
"examples/*/start.ts",
|
|
"examples/*/tests/**/*.ts",
|
|
"packages/*/*/tests/**/*.ts",
|
|
"scripts/**/*.ts"
|
|
],
|
|
"references": [
|
|
{ "path": "./vendor/cosmokit" },
|
|
{ "path": "./vendor/schemastery" },
|
|
{ "path": "./vendor/cordis" },
|
|
{ "path": "./vendor/loader" },
|
|
{ "path": "./vendor/include" },
|
|
{ "path": "./vendor/group" },
|
|
{ "path": "./vendor/timer" },
|
|
{ "path": "./vendor/hmr" },
|
|
{ "path": "./vendor/logger-console" },
|
|
{ "path": "./packages/util/brand" },
|
|
{ "path": "./packages/util/timeout" },
|
|
{ "path": "./packages/llm/llm" },
|
|
{ "path": "./packages/core/session" },
|
|
{ "path": "./packages/core/scope" },
|
|
{ "path": "./packages/session-persistence/session-persistence" },
|
|
{ "path": "./packages/session-persistence/session-persistence-jsonl" },
|
|
{ "path": "./packages/session-persistence/session-persistence-sqlite" },
|
|
{ "path": "./packages/session-query/session-query" },
|
|
{ "path": "./packages/core/system-prompt" },
|
|
{ "path": "./packages/core/agent" },
|
|
{ "path": "./packages/ui/user-interaction" },
|
|
{ "path": "./packages/ui/user-approval" },
|
|
{ "path": "./packages/ui/permission" },
|
|
{ "path": "./packages/core/tools" },
|
|
{ "path": "./packages/skill/skill" },
|
|
{ "path": "./packages/skill/skill-local" },
|
|
{ "path": "./packages/skill/tool-skill" },
|
|
{ "path": "./packages/ui/tool-ask-user" },
|
|
{ "path": "./packages/core/agent-loop" },
|
|
{ "path": "./packages/core/agent-core" },
|
|
{ "path": "./packages/bash/bash" },
|
|
{ "path": "./packages/code-runtime/code-runtime" },
|
|
{ "path": "./packages/code-runtime/code-runtime-worker" },
|
|
{ "path": "./packages/llm/llm-deepseek" },
|
|
{ "path": "./packages/llm/llm-pi-ai" },
|
|
{ "path": "./packages/bash/bash-local" },
|
|
{ "path": "./packages/sandbox/sandbox" },
|
|
{ "path": "./packages/sandbox/sandbox-local" },
|
|
{ "path": "./packages/sandbox/sandbox-policy" },
|
|
{ "path": "./packages/bash/bash-sandbox" },
|
|
{ "path": "./packages/bash/tool-bash" },
|
|
{ "path": "./packages/fs/fs" },
|
|
{ "path": "./packages/fs/fs-local" },
|
|
{ "path": "./packages/fs/fs-policy" },
|
|
{ "path": "./packages/fs/fs-sandbox" },
|
|
{ "path": "./packages/fs/tool-fs" },
|
|
{ "path": "./packages/compact/compact" },
|
|
{ "path": "./packages/compact/compact-basic" },
|
|
{ "path": "./packages/web/web" },
|
|
{ "path": "./packages/web/web-search-exa" },
|
|
{ "path": "./packages/web/web-search-perplexity" },
|
|
{ "path": "./packages/web/web-search-deepseek" },
|
|
{ "path": "./packages/web/web-fetch-local" },
|
|
{ "path": "./packages/web/tool-web" },
|
|
{ "path": "./packages/timeout/timeout-policy" },
|
|
{ "path": "./packages/support/invariants" },
|
|
{ "path": "./packages/ui/acp" },
|
|
{ "path": "./packages/ui/acp-agent" },
|
|
{ "path": "./packages/ui/app-boot" },
|
|
{ "path": "./packages/ui/jsonrpc" },
|
|
{ "path": "./packages/ui/jsonrpc-agent" },
|
|
{ "path": "./packages/ui/stdio-agent" },
|
|
{ "path": "./packages/support/llm-replay" },
|
|
{ "path": "./packages/support/acp-snapshot" },
|
|
{ "path": "./packages/subagent/subagent" },
|
|
{ "path": "./packages/support/subagent-mock" },
|
|
{ "path": "./packages/subagent/tool-subagent" },
|
|
{ "path": "./packages/subagent/subagent-inprocess" },
|
|
{ "path": "./packages/subagent/subagent-subprocess" },
|
|
{ "path": "./packages/subagent/subagent-spawn" },
|
|
{ "path": "./packages/subagent/subagent-fork" },
|
|
{ "path": "./packages/subagent/subagent-acp" },
|
|
{ "path": "./packages/workflow/workflow" },
|
|
{ "path": "./packages/workflow/workflow-workerthread" },
|
|
{ "path": "./packages/workflow/tool-workflow" },
|
|
{ "path": "./packages/todo/tool-todo" },
|
|
{ "path": "./packages/guard/repeat-tool-guard" },
|
|
{ "path": "./packages/cordis/tool-cordis" },
|
|
{ "path": "./packages/hooks/hook-protocol" },
|
|
{ "path": "./packages/hooks/hooks-claude" },
|
|
{ "path": "./packages/hooks/hooks-codex" }
|
|
]
|
|
}
|